Vulnerability in Tecnomatix Plant Simulation Could Allow Code Execution

CVE-2024-45464

Summary

A vulnerability has been identified in specific versions of Siemens' Teamcenter Visualization and Tecnomatix Plant Simulation software. The flaw is characterized by an out of bounds read occurring when parsing specially crafted WRL files. This issue allows an attacker to potentially execute code within the context of the current process, which could lead to compromised application integrity or unauthorized access to sensitive information. Affected versions include Teamcenter Visualization V14.2, V14.3, V2312, and Tecnomatix Plant Simulation V2302 and V2404, necessitating immediate evaluation and remediation by users of these products.

References